Google has released Chrome 100.0.4896.60 for Windows, Mac and Linux with fixes for multiple High risk vulnerabilities. In addition, Google also issued security updates for Chrome for iOS, Chrome for Android and Chrome OS.
VMware has patched two Critical vulnerabilities (CVE-2022-22951, CVE-2022-22952) in VMware Carbon Black App Control (AppC).
VMware patches Critical Carbon Black App Control vulnerabilities Read More »
Google has released Chrome 99.0.4844.84 for Windows, Mac and Linux with fixes for multiple vulnerabilities, to include one zero-day (CVE-2022-1096) exploited in the wild.
The Cybersecurity and Infrastructure Security Agency (CISA) has added 66 vulnerabilities to its Known Exploited Vulnerabilities Catalog. Recent additions include WatchGuard, Mitel, Windows and many other product vulnerabilities.
Drupal has patched a Guzzle third-party library vulnerability (CVE-2022-24775) that affects multiple versions of Drupal Core.
Drupal patches Guzzle third-party library vulnerability (CVE-2022-24775) Read More »
Identity and authentication services firm Okta is investigating reports that the firm has been breached by the Lapsus$ ransomware cybercriminal group.
The Federal Bureau of Investigation (FBI) has issued a report of cybercriminals using AvosLocker ransomware to target 52 entities across critical infrastructure sectors. The report includes the latest indicators of compromise (IoC) on the ransomware threat.
FBI: AvosLocker Ransomware targets victims in critical infrastructure sectors Read More »
A CRI-O vulnerability CVE-2022-0811 in Kubernetes could allow an attacker to take control of affected Kubernetes environment, as well as other software/environments that use CRI-O runtime containers.
CRI-O vulnerability could allow an attacker to take control of Kubernetes environment Read More »
The Internet Systems Consortium (ISC) has released security updates that fix two High risk vulnerabilities in multiple versions of ISC Berkeley Internet Name Domain (BIND). Two Medium severity issues were also addressed.
BIND fixes two High risk vulnerabilities (CVE-2022-0635 and CVE-2022-0667) Read More »
OpenSSL has patched one High risk vulnerability CVE-2022-0778 in certain OpenSSL versions. As a result, a bad actor could cause an Infinite loop in the BN_mod_sqrt() function that could result in a denial of service (DoS) condition.
OpenSSL patches one High risk vulnerability (CVE-2022-0778) Read More »
